$ rpki-client -vvf rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.mft File: Pa__vH6RLp_80qLg2SCOvJlwmyI.mft (raw, json) Hash identifier: H/4pSYkEYrPtVSAqMH5/OxAd82PVe2c8Xy14YTqPg1k= Subject key identifier: 15:78:D5:B1:E6:D4:76:9C:19:75:DA:61:35:4F:48:18:CF:9B:1B:59 Authority key identifier: 3D:AF:FF:BC:7E:91:2E:9F:FC:D2:A2:E0:D9:20:8E:BC:99:70:9B:22 Certificate issuer: /CN=A9179B50/serialNumber=3DAFFFBC7E912E9FFCD2A2E0D9208EBC99709B22 Certificate serial: 0609 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pa__vH6RLp_80qLg2SCOvJlwmyI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.mft Manifest number: 05EC Signing time: Sat 10 May 2025 22:33:44 +0000 Manifest this update: Sat 10 May 2025 22:33:44 +0000 Manifest next update: Sat 17 May 2025 22:33:44 +0000 Files and hashes: 1: Pa__vH6RLp_80qLg2SCOvJlwmyI.crl (hash: gHVXSObUt0IEo3d+UIP6s25jsKTMxcBUl+GPRSPjISw=) 2: 5DE13E6AAF1211EB8138312CC4F9AE02.roa (hash: kdGlpoPLDFl4EFsEkQ3+koS5Zps0quso4evVDz2ybGs=) 3: 5D49C24CAF1211EB8138312CC4F9AE02.roa (hash: SrZKBZGz8OzOGhz2SHKRuiCBww7vVTb4bHz7dYOe5eA=) 4: 0CDA881EAF0311EB96FC344BC4F9AE02.roa (hash: y01Dpux3/iKwZXDRv92g3i91QNG9oOahiRukT+wPDl0=) 5: 96D7EE96AF0111EB8FE37446C4F9AE02.roa (hash: OSggIm+/p+MrL8wcnCaLfLB40YedacjWTkw8IkjnU3M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.crl rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pa__vH6RLp_80qLg2SCOvJlwmyI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 22:33:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1545 (0x609) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179B50, serialNumber=3DAFFFBC7E912E9FFCD2A2E0D9208EBC99709B22 Validity Not Before: May 10 22:33:44 2025 GMT Not After : May 17 22:33:44 2025 GMT Subject: CN=681fd448-1d10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:d2:d7:3f:35:e4:d0:71:f5:7c:12:d3:13:8d: 4c:e3:15:b2:32:a3:34:06:db:41:8e:49:3d:99:60: e9:82:72:8b:a6:10:0f:71:ea:ed:3e:da:72:47:40: 97:ad:a4:f0:89:17:7a:31:45:0c:e2:bc:1e:92:8e: f8:5f:12:09:13:53:07:43:9e:03:91:99:0b:23:2b: 02:c9:a8:4c:18:e2:82:e3:b9:08:dd:9a:a8:e5:32: 97:f2:ec:ef:d2:81:35:53:d3:d2:5f:7d:2e:06:2a: 93:2a:70:68:12:61:99:11:41:39:6b:d3:4d:e6:e7: 49:0b:b7:e8:4b:70:61:5c:b0:3a:5e:01:e6:7a:7e: c2:01:d7:7e:97:b0:38:c8:a0:d7:a3:81:9d:8b:06: b9:b1:1c:8c:d3:ad:91:37:ec:99:07:f0:d1:36:69: b3:05:fb:9d:fd:0d:8c:72:1a:2b:2f:00:ac:1d:c4: d2:9f:b1:30:1c:fc:21:87:d6:cf:be:22:34:c7:5c: 9e:40:4b:48:25:ee:6b:d7:da:66:fa:be:de:9a:50: d9:68:86:cc:ca:3a:fa:b3:af:c2:00:aa:a7:6d:d6: 59:a6:c8:96:d6:00:21:4d:f9:d4:01:92:3a:53:c9: d8:7f:13:68:fb:cd:e7:7c:ce:d6:f1:ba:46:32:f0: 1d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:78:D5:B1:E6:D4:76:9C:19:75:DA:61:35:4F:48:18:CF:9B:1B:59 X509v3 Authority Key Identifier: keyid:3D:AF:FF:BC:7E:91:2E:9F:FC:D2:A2:E0:D9:20:8E:BC:99:70:9B:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pa__vH6RLp_80qLg2SCOvJlwmyI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:fd:71:6d:03:cf:2c:19:7b:d0:ad:df:6f:5a:c0:bf:12:a6: 84:07:b8:55:26:f7:41:91:98:87:3f:9f:40:c8:b8:b5:f9:45: b6:0e:09:b3:04:d5:b1:81:21:9f:18:cf:ed:61:16:d3:ce:42: 06:03:cf:b2:3b:b2:9e:53:4d:7a:e5:f0:b5:77:9a:8f:bf:be: 3d:8c:63:2e:29:34:88:0b:ab:87:ae:6d:87:5a:4b:1d:dd:83: b9:4b:85:69:26:0e:fa:b5:ad:61:14:e0:bb:23:9d:30:24:ef: 17:78:b1:47:88:07:09:8e:47:a5:ed:9d:6b:b9:bb:f7:a1:b2: c8:77:79:ec:2c:a3:2d:64:c5:f9:37:55:00:e9:25:ea:09:60: e4:bc:a4:b2:02:15:9c:57:b4:cc:cc:79:78:46:7a:88:a7:a2: cf:c7:71:7e:af:07:6c:e9:08:bd:6c:dd:7b:f5:41:2c:bb:b7: 30:2d:ad:77:16:eb:e3:99:32:98:cd:a5:f9:81:2f:6b:32:c7: b9:2e:da:5b:4a:f7:1f:3c:cd:48:dc:24:d8:74:73:12:7f:98: b2:e9:99:75:df:d3:22:aa:9b:ab:11:c0:ba:b7:89:d4:49:63: 9d:43:06:47:c7:b9:3a:7e:18:5a:c6:49:3d:35:8a:8f:7c:8e: 42:6a:e8:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlCNTAxMTAvBgNVBAUTKDNEQUZGRkJDN0U5MTJFOUZGQ0QyQTJFMEQ5MjA4RUJD OTk3MDlCMjIwHhcNMjUwNTEwMjIzMzQ0WhcNMjUwNTE3MjIzMzQ0WjAYMRYwFAYD VQQDEw02ODFmZDQ0OC0xZDEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8NLXPzXk0HH1fBLTE41M4xWyMqM0BttBjkk9mWDpgnKLphAPcertPtpyR0CX raTwiRd6MUUM4rweko74XxIJE1MHQ54DkZkLIysCyahMGOKC47kI3Zqo5TKX8uzv 0oE1U9PSX30uBiqTKnBoEmGZEUE5a9NN5udJC7foS3BhXLA6XgHmen7CAdd+l7A4 yKDXo4Gdiwa5sRyM062RN+yZB/DRNmmzBfud/Q2MchorLwCsHcTSn7EwHPwhh9bP viI0x1yeQEtIJe5r19pm+r7emlDZaIbMyjr6s6/CAKqnbdZZpsiW1gAhTfnUAZI6 U8nYfxNo+83nfM7W8bpGMvAdSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBV41bHm 1HacGXXaYTVPSBjPmxtZMB8GA1UdIwQYMBaAFD2v/7x+kS6f/NKi4NkgjryZcJsi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUI1MC9DNkMwNDlCMkFF RkUxMUVCODA5MzI2M0VDNEY5QUUwMi9QYV9fdkg2UkxwXzgwcUxnMlNDT3ZKbHdt eUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BhX192SDZSTHBfODBxTGcyU0NPdkpsd215SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUI1MC9DNkMwNDlCMkFFRkUxMUVCODA5MzI2M0VDNEY5QUUwMi9QYV9fdkg2Ukxw XzgwcUxnMlNDT3ZKbHdteUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCU/XFtA88sGXvQrd9vWsC/EqaEB7hVJvdBkZiHP59AyLi1+UW2Dgmz BNWxgSGfGM/tYRbTzkIGA8+yO7KeU0165fC1d5qPv749jGMuKTSIC6uHrm2HWksd 3YO5S4VpJg76ta1hFOC7I50wJO8XeLFHiAcJjkel7Z1rubv3obLId3nsLKMtZMX5 N1UA6SXqCWDkvKSyAhWcV7TMzHl4RnqIp6LPx3F+rwds6Qi9bN179UEsu7cwLa13 FuvjmTKYzaX5gS9rMse5LtpbSvcfPM1I3CTYdHMSf5iy6Zl139MiqpurEcC6t4nU SWOdQwZHx7k6fhhaxkk9NYqPfI5Cauht -----END CERTIFICATE-----Generated at Sun May 11 11:48:39 2025 by rpki-client